How to build secure Apache Tomcat deployments with RPM.

Transcription

1 How to build secure Apache Tomcat deployments with RPM. My security experiences really tie into everyday work. A colleague called me from my last gig and asked how to build a RedHat Package Manager (RPM) package for Apache Tomcat. I asked him why he was doing this and the answer came back that the customer wanted this done. So back to the tie in with work comment. One of my current colleagues has been building custom RPMs for my current contract and he incited some new interest with me in regards to performing more Secure deployments of software. Specifically using the %pre, %post, %preun and %postun sections to perform the necessary actions that would secure the installation. I love laying down files with RPMs because I can set the exact file permissions that I want, along with ownership of those files. This ties into Discretionary Access Controls (DAC) because as the administrator, I set what I believe the user should have (at my discretion). The tomcat user could change these, but I ve performed an action in my %pre section that will prevent anyone but someone who is root or has the sudo capability to switch to the tomcat user from modifying these permissions. Target Platform: Virtual Machine in VMware Workstation 6.5. CPUs: 2 CPUs allocated Memory: 2 GB allocated Hard Drive: 30 GB allocated for vmdk Software used: OS: RHEL Applications: Apache Tomcat 7 Java 6

2 OS Install Followed default install from vendor (literally, just hit next, next, next and then Finish). Java 6 Install Download Java from: download html The directory /opt already existed on my system, if it doesn t exist for you, create it with these commands: su root mkdir /opt chmod 0755 /opt Copy Java to /opt su - root cp <your_download_directory>/jdk-6u26-linux-i586.bin /opt Change directory to /opt, extract the contents and create a sym link to the new directory: cd /opt umask 0022 chmod 750 jdk-6u26-linux-i586.bin./jdk-6u26-linux-i586.bin ln -s jdk1.6.0_26 java rm f jdk-6u26-linux-i586.bin Base install of Apache Tomcat Download the tarball for Tomcat 7 from: RPM Construct You can build the source tarball (the file rpmbuild uses as the source of all files you wish to include in your RPM) as your organization sees fit [meaning that you choose how much you wish to include and what to exclude]. I ve tried to figure out a way to automate this process and have stumbled every step of the way. The reason is getting the permissions right on all of the files. Every software package is different, so choosing a generic permission of 0644 fails when the file needs to execute with permissions You will also need to follow the documentation

3 from Fedora on building RPMs, specifically how to set up the folder structure. If it doesn t have the following line, you need better instructions: mkdir -p $HOME/rpmbuild/{BUILD,BUILDROOT,RPMS,SOURCES,SPECS,SRPMS,tmp} Place your source tarball into $HOME/rpmbuild/SOURCES/. I named mine apache-tomcat-7.0.tgz. Place your SPEC file into $HOME/rpmbuild/SPECS/. I named mine apache-tomcat-7.0.spec. Now, as your separate build user (don t build RPMs as the root user, ever), run this command: rpmbuild -ba./apache-tomcat-7.0.spec And finally test, test, test before moving the RPM into production. How Security and Common Sense are Applied The magic of the %pre section %pre ( ## Variables for this section: DATE=$( /bin/date +%Y%b%d-%H:%M ) ## Make the destination directory if it doesn't exist: [! -d /opt/apache-tomcat ] && mkdir -p /opt/apache-tomcat ## Remove sym link, if it exists: [ -L /opt/apache-tomcat ] && unlink /opt/apache-tomcat ## If the tomcat user and group doesn't exist, add them. ## I chose gid and uid of 333 because I want it less than 500 for ## user accounts. This is a service acct. [ `grep -c tomcat /etc/group` -lt "1" ] && groupadd -f -g 333 tomcat [ `grep -c tomcat /etc/passwd` -lt "1" ] && useradd \ -c "Tomcat Srvc Acct." -m -g 333 -s /bin/bash -u 333 tomcat ## the sys admin doesn't need to know this AND ## it needs to be unique per system: MAC=$( ip addr show eth0 grep ether awk '{print $2}' ) PASSWD_TOMCAT=$( echo "$MAC $HOSTNAME" `cat /var/log/messages` \ /usr/bin/sha512sum cut -c8-36 ) echo "tomcat:${passwd_tomcat}" chpasswd ) > /var/tmp/%{name}-%{version}-%{release}-install.pre.log 2>&1

4 The DATE variable is not needed here. Part of my template for RPMs. Before I install, make sure the directory structure exists. This is me being somewhat anal, RPM will perform this for me. Next, remove the symbolic link if it exists. Next, create the account and group if they don t exist. For security, don t ever run a web server, service, application as root. It s just plain stupid. If someone hacks the service, then they own it at the level of the user running that service. Game over. Finally, create some unique variables to that system, combine them and pass them to a hash algorithm that will always give a unique output which we will then parse out a 24 character password that is not shared with anyone. If he/she has root, they can use su tomcat or if applicable, sudo su tomcat to get into that account. The magic of the %post section %post ( ## Variables for this section: DATE=$( /bin/date +%Y%b%d-%H:%M ) ## Create sym link to new package: /bin/ln -s /opt/apache-tomcat /opt/apache-tomcat ## Set the service to run on boot: /sbin/chkconfig --add apache-tomcat ## Start the service /sbin/service apache-tomcat start ) > /var/tmp/%{name}-%{version}-%{release}-install.post.log 2>&1 I ve used the file section to include my startup file, /etc/init.d/apache-tomcat. I then create a sym link for /opt/apache-tomcat to the real directory. Finally, add the service to automatically start on reboot (startup). The magic of the %preun section %preun ( ## Variables for this section: DATE=$( /bin/date +%Y%b%d-%H:%M )

5 ## Stop the service: /sbin/service apache-tomcat stop ## Delete the service: /sbin/chkconfig --del apache-tomcat ## backup functional files: [ -d /opt/apache-tomcat ] && /bin/tar czf /opt/apache-tomcat ${DATE}.tgz /opt/apache-tomcat /conf /opt/apache-tomcat / webapps /etc/init.d/apache-tomcat ## remove the sym link /bin/unlink /opt/apache-tomcat ) > /var/tmp/%{name}-%{version}-%{release}-uninstall.pre.log 2>&1 I spent some time here getting this right. First, stop the service and delete the service with chkconfig. Second, what needs to be backed up before uninstall. The answer is your current configurations, the deployed webapps and finally the startup script (in case anything custom was put into it for that system). This allows you to upgrade to a newer version and reconfigure the server back the way you want it. Even better yet, include those changes into your custom RPM. Then unlink the sym link to /opt/apache-tomcat. The magic of the %postun section This section doesn t do anything.

6 Conclusion I spent over 10 hours studying all of the pre-requisites in order to get this right. In the appendix I have included my Spec file for your consideration. The important parts are the above sections (%pre.. %postun) and what they are executing. This is the magic of how to get a very secure and stable installation of tomcat running on all of your servers. The file permissions are handled by RPM. What can you do to make the rest of the install optimized and how can you further change your servers so that you end up with stable, consistent and highly reliable platforms for your deployed web services and servers? The challenge is now in your mind.

7 Appendix: My Apache Tomcat 7 spec file (my apologies for the line wraps below): # Define variables for later use %define name apache-tomcat %define version 7.0 %define release 47 # Package information Packager: Master Foo (Foo@fortress.lan) Summary: apache-tomcat setup for RHEL 5 Name: %{name} Version: %{version} Release: %{release} BuildArch: x86_64 Group: Applications License: GPL Url: Vendor: Master Foo Source0: %{name}-%{version}.tgz Buildroot: %{_tmppath}/%{name}-%{version}-buildroot BuildRequires: coreutils Requires: jdk, /sbin/chkconfig, /sbin/service, /bin/unlink, /bin/mv, /bin/mkdir, /bin/rm # Package Description %description This rpm lays down the files necessary for the application %{name} compiled for RHEL 5. # What to do in prep for building %prep %setup -c # Build process (not really needed most times) %build ## Package install process %install rm -rf %{buildroot} # install - copy files and set attributes: ## Directory Build: mkdir -p %{buildroot}/opt mkdir -p %{buildroot}/etc/init.d mkdir -p -m 0755 %{buildroot}/opt/apache-tomcat mkdir -p -m 0755 %{buildroot}/opt/apache-tomcat /bin mkdir -p -m 0755 %{buildroot}/opt/apache-tomcat /temp mkdir -p -m 0755 %{buildroot}/opt/apache-tomcat /work mkdir -p -m 0755 %{buildroot}/opt/apache-tomcat /logs mkdir -p -m 0755 %{buildroot}/opt/apache-tomcat /conf mkdir -p -m 0755 %{buildroot}/opt/apache-tomcat /lib mkdir -p -m 0755 %{buildroot}/opt/apache-tomcat /webapps mkdir -p -m 0755 %{buildroot}/opt/apache-tomcat /webapps/examples

8 mkdir -p -m 0755 %{buildroot}/opt/apache-tomcat /webapps/root mkdir -p -m 0755 %{buildroot}/opt/apache-tomcat /webapps/root/web-inf mkdir -p -m 0755 %{buildroot}/opt/apache-tomcat /webapps/manager mkdir -p -m 0755 %{buildroot}/opt/apache-tomcat /webapps/manager/web-inf mkdir -p -m 0755 %{buildroot}/opt/apache-tomcat /webapps/manager/web-inf/jsp mkdir -p -m 0755 %{buildroot}/opt/apache-tomcat /webapps/manager/meta-inf mkdir -p -m 0755 %{buildroot}/opt/apache-tomcat /webapps/manager/images mkdir -p -m 0755 %{buildroot}/opt/apache-tomcat /webapps/docs mkdir -p -m 0755 %{buildroot}/opt/apache-tomcat /webapps/docs/api mkdir -p -m 0755 %{buildroot}/opt/apache-tomcat /webapps/docs/web-inf mkdir -p -m 0755 %{buildroot}/opt/apache-tomcat /webapps/docs/architecture mkdir -p -m 0755 %{buildroot}/opt/apache-tomcat /webapps/docs/architecture/startup mkdir -p -m 0755 %{buildroot}/opt/apache-tomcat /webapps/docs/architecture/requestProcess mkdir -p -m 0755 %{buildroot}/opt/apache-tomcat /webapps/docs/jspapi mkdir -p -m 0755 %{buildroot}/opt/apache-tomcat /webapps/docs/config mkdir -p -m 0755 %{buildroot}/opt/apache-tomcat /webapps/docs/tribes mkdir -p -m 0755 %{buildroot}/opt/apache-tomcat /webapps/docs/appdev mkdir -p -m 0755 %{buildroot}/opt/apache-tomcat /webapps/docs/appdev/sample mkdir -p -m 0755 %{buildroot}/opt/apache-tomcat /webapps/docs/appdev/sample/web mkdir -p -m 0755 %{buildroot}/opt/apache-tomcat /webapps/docs/appdev/sample/web/WEB-INF mkdir -p -m 0755 %{buildroot}/opt/apache-tomcat /webapps/docs/appdev/sample/web/images mkdir -p -m 0755 %{buildroot}/opt/apache-tomcat /webapps/docs/appdev/sample/src mkdir -p -m 0755 %{buildroot}/opt/apache-tomcat /webapps/docs/appdev/sample/src/mypackage mkdir -p -m 0755 %{buildroot}/opt/apache-tomcat /webapps/docs/appdev/sample/docs mkdir -p -m 0755 %{buildroot}/opt/apache-tomcat /webapps/docs/servletapi mkdir -p -m 0755 %{buildroot}/opt/apache-tomcat /webapps/docs/funcspecs mkdir -p -m 0755 %{buildroot}/opt/apache-tomcat /webapps/docs/images mkdir -p -m 0755 %{buildroot}/opt/apache-tomcat /webapps/docs/elapi ## Files Install: install -m 0750 etc/init.d/apache-tomcat %{buildroot}/etc/init.d/apache-tomcat install -m 0644 opt/apache-tomcat /release-notes %{buildroot}/opt/apache-tomcat /RELEASE-NOTES install -m 0644 opt/apache-tomcat /bin/setclasspath.bat %{buildroot}/opt/apachetomcat /bin/setclasspath.bat install -m 0755 opt/apache-tomcat /bin/version.sh %{buildroot}/opt/apachetomcat /bin/version.sh install -m 0755 opt/apache-tomcat /bin/startup.sh %{buildroot}/opt/apachetomcat /bin/startup.sh install -m 0755 opt/apache-tomcat /bin/configtest.sh %{buildroot}/opt/apachetomcat /bin/configtest.sh install -m 0644 opt/apache-tomcat /bin/digest.bat %{buildroot}/opt/apachetomcat /bin/digest.bat install -m 0644 opt/apache-tomcat /bin/version.bat %{buildroot}/opt/apachetomcat /bin/version.bat install -m 0755 opt/apache-tomcat /bin/setclasspath.sh %{buildroot}/opt/apachetomcat /bin/setclasspath.sh install -m 0644 opt/apache-tomcat /bin/shutdown.bat %{buildroot}/opt/apachetomcat /bin/shutdown.bat install -m 0644 opt/apache-tomcat /bin/startup.bat %{buildroot}/opt/apachetomcat /bin/startup.bat install -m 0755 opt/apache-tomcat /bin/tool-wrapper.sh %{buildroot}/opt/apachetomcat /bin/tool-wrapper.sh install -m 0644 opt/apache-tomcat /bin/catalina-tasks.xml %{buildroot}/opt/apache-tomcat /bin/catalina-tasks.xml install -m 0644 opt/apache-tomcat /bin/tool-wrapper.bat %{buildroot}/opt/apachetomcat /bin/tool-wrapper.bat install -m 0755 opt/apache-tomcat /bin/catalina.sh %{buildroot}/opt/apachetomcat /bin/catalina.sh

9 install -m 0644 opt/apache-tomcat /bin/bootstrap.jar %{buildroot}/opt/apachetomcat /bin/bootstrap.jar install -m 0755 opt/apache-tomcat /bin/digest.sh %{buildroot}/opt/apache-tomcat /bin/digest.sh install -m 0644 opt/apache-tomcat /bin/cpappend.bat %{buildroot}/opt/apachetomcat /bin/cpappend.bat install -m 0644 opt/apache-tomcat /bin/configtest.bat %{buildroot}/opt/apachetomcat /bin/configtest.bat install -m 0644 opt/apache-tomcat /bin/commons-daemon-native.tar.gz %{buildroot}/opt/apache-tomcat /bin/commons-daemon-native.tar.gz install -m 0644 opt/apache-tomcat /bin/tomcat-juli.jar %{buildroot}/opt/apachetomcat /bin/tomcat-juli.jar install -m 0644 opt/apache-tomcat /bin/tomcat-native.tar.gz %{buildroot}/opt/apache-tomcat /bin/tomcat-native.tar.gz install -m 0644 opt/apache-tomcat /bin/catalina.bat %{buildroot}/opt/apachetomcat /bin/catalina.bat install -m 0644 opt/apache-tomcat /bin/commons-daemon.jar %{buildroot}/opt/apache-tomcat /bin/commons-daemon.jar install -m 0755 opt/apache-tomcat /bin/shutdown.sh %{buildroot}/opt/apachetomcat /bin/shutdown.sh install -m 0755 opt/apache-tomcat /bin/daemon.sh %{buildroot}/opt/apache-tomcat /bin/daemon.sh install -m 0644 opt/apache-tomcat /temp/safetodelete.tmp %{buildroot}/opt/apache-tomcat /temp/safetodelete.tmp install -m 0644 opt/apache-tomcat /notice %{buildroot}/opt/apache-tomcat /NOTICE install -m 0600 opt/apache-tomcat /conf/logging.properties %{buildroot}/opt/apache-tomcat /conf/logging.properties install -m 0600 opt/apache-tomcat /conf/web.xml %{buildroot}/opt/apache-tomcat /conf/web.xml install -m 0600 opt/apache-tomcat /conf/server.xml %{buildroot}/opt/apachetomcat /conf/server.xml install -m 0600 opt/apache-tomcat /conf/catalina.policy %{buildroot}/opt/apachetomcat /conf/catalina.policy install -m 0600 opt/apache-tomcat /conf/context.xml %{buildroot}/opt/apachetomcat /conf/context.xml install -m 0600 opt/apache-tomcat /conf/catalina.properties %{buildroot}/opt/apache-tomcat /conf/catalina.properties install -m 0600 opt/apache-tomcat /conf/tomcat-users.xml %{buildroot}/opt/apache-tomcat /conf/tomcat-users.xml install -m 0644 opt/apache-tomcat /lib/tomcat-util.jar %{buildroot}/opt/apachetomcat /lib/tomcat-util.jar install -m 0644 opt/apache-tomcat /lib/tomcat-i18n-fr.jar %{buildroot}/opt/apache-tomcat /lib/tomcat-i18n-fr.jar install -m 0644 opt/apache-tomcat /lib/ecj jar %{buildroot}/opt/apachetomcat /lib/ecj jar install -m 0644 opt/apache-tomcat /lib/servlet-api.jar %{buildroot}/opt/apachetomcat /lib/servlet-api.jar install -m 0644 opt/apache-tomcat /lib/websocket-api.jar %{buildroot}/opt/apache-tomcat /lib/websocket-api.jar install -m 0644 opt/apache-tomcat /lib/tomcat-i18n-es.jar %{buildroot}/opt/apache-tomcat /lib/tomcat-i18n-es.jar install -m 0644 opt/apache-tomcat /lib/annotations-api.jar %{buildroot}/opt/apache-tomcat /lib/annotations-api.jar install -m 0644 opt/apache-tomcat /lib/jsp-api.jar %{buildroot}/opt/apachetomcat /lib/jsp-api.jar install -m 0644 opt/apache-tomcat /lib/tomcat7-websocket.jar %{buildroot}/opt/apache-tomcat /lib/tomcat7-websocket.jar install -m 0644 opt/apache-tomcat /lib/catalina-ha.jar %{buildroot}/opt/apachetomcat /lib/catalina-ha.jar install -m 0644 opt/apache-tomcat /lib/catalina.jar %{buildroot}/opt/apachetomcat /lib/catalina.jar

10 install -m 0644 opt/apache-tomcat /lib/tomcat-api.jar %{buildroot}/opt/apachetomcat /lib/tomcat-api.jar install -m 0644 opt/apache-tomcat /lib/jasper-el.jar %{buildroot}/opt/apachetomcat /lib/jasper-el.jar install -m 0644 opt/apache-tomcat /lib/catalina-ant.jar %{buildroot}/opt/apachetomcat /lib/catalina-ant.jar install -m 0644 opt/apache-tomcat /lib/tomcat-i18n-ja.jar %{buildroot}/opt/apache-tomcat /lib/tomcat-i18n-ja.jar install -m 0644 opt/apache-tomcat /lib/tomcat-jdbc.jar %{buildroot}/opt/apachetomcat /lib/tomcat-jdbc.jar install -m 0644 opt/apache-tomcat /lib/el-api.jar %{buildroot}/opt/apachetomcat /lib/el-api.jar install -m 0644 opt/apache-tomcat /lib/jasper.jar %{buildroot}/opt/apachetomcat /lib/jasper.jar install -m 0644 opt/apache-tomcat /lib/tomcat-dbcp.jar %{buildroot}/opt/apachetomcat /lib/tomcat-dbcp.jar install -m 0644 opt/apache-tomcat /lib/tomcat-coyote.jar %{buildroot}/opt/apache-tomcat /lib/tomcat-coyote.jar install -m 0644 opt/apache-tomcat /lib/catalina-tribes.jar %{buildroot}/opt/apache-tomcat /lib/catalina-tribes.jar install -m 0644 opt/apache-tomcat /license %{buildroot}/opt/apache-tomcat /LICENSE install -m 0644 opt/apache-tomcat /running.txt %{buildroot}/opt/apache-tomcat /RUNNING.txt install -m 0644 opt/apache-tomcat /webapps/examples/index.html %{buildroot}/opt/apache-tomcat /webapps/examples/index.html install -m 0644 opt/apache-tomcat /webapps/root/bg-button.png %{buildroot}/opt/apache-tomcat /webapps/root/bg-button.png install -m 0644 opt/apache-tomcat /webapps/root/tomcat.gif %{buildroot}/opt/apache-tomcat /webapps/root/tomcat.gif install -m 0644 opt/apache-tomcat /webapps/root/web-inf/web.xml %{buildroot}/opt/apache-tomcat /webapps/root/web-inf/web.xml install -m 0644 opt/apache-tomcat /webapps/root/asf-logo-wide.gif %{buildroot}/opt/apache-tomcat /webapps/root/asf-logo-wide.gif install -m 0644 opt/apache-tomcat /webapps/root/tomcat.css %{buildroot}/opt/apache-tomcat /webapps/root/tomcat.css install -m 0644 opt/apache-tomcat /webapps/root/index.jsp %{buildroot}/opt/apache-tomcat /webapps/root/index.jsp install -m 0644 opt/apache-tomcat /webapps/root/release-notes.txt %{buildroot}/opt/apache-tomcat /webapps/root/release-notes.txt install -m 0644 opt/apache-tomcat /webapps/root/bg-nav.png %{buildroot}/opt/apache-tomcat /webapps/root/bg-nav.png install -m 0644 opt/apache-tomcat /webapps/root/build.xml %{buildroot}/opt/apache-tomcat /webapps/root/build.xml install -m 0644 opt/apache-tomcat /webapps/root/bg-middle.png %{buildroot}/opt/apache-tomcat /webapps/root/bg-middle.png install -m 0644 opt/apache-tomcat /webapps/root/tomcat-power.gif %{buildroot}/opt/apache-tomcat /webapps/root/tomcat-power.gif install -m 0644 opt/apache-tomcat /webapps/root/asf-logo.png %{buildroot}/opt/apache-tomcat /webapps/root/asf-logo.png install -m 0644 opt/apache-tomcat /webapps/root/favicon.ico %{buildroot}/opt/apache-tomcat /webapps/root/favicon.ico install -m 0644 opt/apache-tomcat /webapps/root/tomcat.svg %{buildroot}/opt/apache-tomcat /webapps/root/tomcat.svg install -m 0644 opt/apache-tomcat /webapps/root/bg-upper.png %{buildroot}/opt/apache-tomcat /webapps/root/bg-upper.png install -m 0644 opt/apache-tomcat /webapps/root/bg-nav-item.png %{buildroot}/opt/apache-tomcat /webapps/root/bg-nav-item.png install -m 0644 opt/apache-tomcat /webapps/root/tomcat.png %{buildroot}/opt/apache-tomcat /webapps/root/tomcat.png install -m 0644 opt/apache-tomcat /webapps/manager/web-inf/jsp/sessiondetail.jsp %{buildroot}/opt/apache-tomcat /webapps/manager/web-inf/jsp/sessiondetail.jsp

11 install -m 0644 opt/apache-tomcat /webapps/manager/web-inf/jsp/404.jsp %{buildroot}/opt/apache-tomcat /webapps/manager/web-inf/jsp/404.jsp install -m 0644 opt/apache-tomcat /webapps/manager/web-inf/jsp/sessionslist.jsp %{buildroot}/opt/apache-tomcat /webapps/manager/web-inf/jsp/sessionslist.jsp install -m 0644 opt/apache-tomcat /webapps/manager/web-inf/jsp/403.jsp %{buildroot}/opt/apache-tomcat /webapps/manager/web-inf/jsp/403.jsp install -m 0644 opt/apache-tomcat /webapps/manager/web-inf/jsp/401.jsp %{buildroot}/opt/apache-tomcat /webapps/manager/web-inf/jsp/401.jsp install -m 0644 opt/apache-tomcat /webapps/manager/web-inf/web.xml %{buildroot}/opt/apache-tomcat /webapps/manager/web-inf/web.xml install -m 0644 opt/apache-tomcat /webapps/manager/xform.xsl %{buildroot}/opt/apache-tomcat /webapps/manager/xform.xsl install -m 0644 opt/apache-tomcat /webapps/manager/index.jsp %{buildroot}/opt/apache-tomcat /webapps/manager/index.jsp install -m 0644 opt/apache-tomcat /webapps/manager/meta-inf/context.xml %{buildroot}/opt/apache-tomcat /webapps/manager/meta-inf/context.xml install -m 0644 opt/apache-tomcat /webapps/manager/status.xsd %{buildroot}/opt/apache-tomcat /webapps/manager/status.xsd install -m 0644 opt/apache-tomcat /webapps/manager/images/tomcat.gif %{buildroot}/opt/apache-tomcat /webapps/manager/images/tomcat.gif install -m 0644 opt/apache-tomcat /webapps/manager/images/update.gif %{buildroot}/opt/apache-tomcat /webapps/manager/images/update.gif install -m 0644 opt/apache-tomcat /webapps/manager/images/fix.gif %{buildroot}/opt/apache-tomcat /webapps/manager/images/fix.gif install -m 0644 opt/apache-tomcat /webapps/manager/images/asf-logo.gif %{buildroot}/opt/apache-tomcat /webapps/manager/images/asf-logo.gif install -m 0644 opt/apache-tomcat /webapps/manager/images/docs.gif %{buildroot}/opt/apache-tomcat /webapps/manager/images/docs.gif install -m 0644 opt/apache-tomcat /webapps/manager/images/add.gif %{buildroot}/opt/apache-tomcat /webapps/manager/images/add.gif install -m 0644 opt/apache-tomcat /webapps/manager/images/void.gif %{buildroot}/opt/apache-tomcat /webapps/manager/images/void.gif install -m 0644 opt/apache-tomcat /webapps/manager/images/design.gif %{buildroot}/opt/apache-tomcat /webapps/manager/images/design.gif install -m 0644 opt/apache-tomcat /webapps/manager/images/code.gif %{buildroot}/opt/apache-tomcat /webapps/manager/images/code.gif install -m 0644 opt/apache-tomcat /webapps/docs/windows-service-howto.html %{buildroot}/opt/apache-tomcat /webapps/docs/windows-service-howto.html install -m 0644 opt/apache-tomcat /webapps/docs/connectors.html %{buildroot}/opt/apache-tomcat /webapps/docs/connectors.html install -m 0644 opt/apache-tomcat /webapps/docs/realm-howto.html %{buildroot}/opt/apache-tomcat /webapps/docs/realm-howto.html install -m 0644 opt/apache-tomcat /webapps/docs/cgi-howto.html %{buildroot}/opt/apache-tomcat /webapps/docs/cgi-howto.html install -m 0644 opt/apache-tomcat /webapps/docs/virtual-hosting-howto.html %{buildroot}/opt/apache-tomcat /webapps/docs/virtual-hosting-howto.html install -m 0644 opt/apache-tomcat /webapps/docs/api/index.html %{buildroot}/opt/apache-tomcat /webapps/docs/api/index.html install -m 0644 opt/apache-tomcat /webapps/docs/web-socket-howto.html %{buildroot}/opt/apache-tomcat /webapps/docs/web-socket-howto.html install -m 0644 opt/apache-tomcat /webapps/docs/web-inf/web.xml %{buildroot}/opt/apache-tomcat /webapps/docs/web-inf/web.xml install -m 0644 opt/apache-tomcat /webapps/docs/security-manager-howto.html %{buildroot}/opt/apache-tomcat /webapps/docs/security-manager-howto.html install -m 0644 opt/apache-tomcat /webapps/docs/ssi-howto.html %{buildroot}/opt/apache-tomcat /webapps/docs/ssi-howto.html install -m 0644 opt/apache-tomcat /webapps/docs/apr.html %{buildroot}/opt/apache-tomcat /webapps/docs/apr.html install -m 0644 opt/apache-tomcat /webapps/docs/default-servlet.html %{buildroot}/opt/apache-tomcat /webapps/docs/default-servlet.html install -m 0644 opt/apache-tomcat /webapps/docs/architecture/startup.html %{buildroot}/opt/apache-tomcat /webapps/docs/architecture/startup.html

12 install -m 0644 opt/apache-tomcat /webapps/docs/architecture/requestprocess.html %{buildroot}/opt/apache-tomcat /webapps/docs/architecture/requestprocess.html install -m 0644 opt/apache-tomcat /webapps/docs/architecture/index.html %{buildroot}/opt/apache-tomcat /webapps/docs/architecture/index.html install -m 0644 opt/apache-tomcat /webapps/docs/architecture/overview.html %{buildroot}/opt/apache-tomcat /webapps/docs/architecture/overview.html install -m 0644 opt/apache-tomcat /webapps/docs/architecture/startup/serverStartup.pdf %{buildroot}/opt/apachetomcat /webapps/docs/architecture/startup/serverstartup.pdf install -m 0644 opt/apache-tomcat /webapps/docs/architecture/startup/serverStartup.txt %{buildroot}/opt/apachetomcat /webapps/docs/architecture/startup/serverstartup.txt install -m 0644 opt/apache-tomcat /webapps/docs/architecture/requestProcess/requestProcess.pdf %{buildroot}/opt/apache-tomcat /webapps/docs/architecture/requestProcess/requestProcess.pdf install -m 0644 opt/apache-tomcat /webapps/docs/architecture/requestProcess/roseModel.mdl %{buildroot}/opt/apachetomcat /webapps/docs/architecture/requestprocess/rosemodel.mdl install -m 0644 opt/apache-tomcat /webapps/docs/index.html %{buildroot}/opt/apache-tomcat /webapps/docs/index.html install -m 0644 opt/apache-tomcat /webapps/docs/changelog.html %{buildroot}/opt/apache-tomcat /webapps/docs/changelog.html install -m 0644 opt/apache-tomcat /webapps/docs/jspapi/index.html %{buildroot}/opt/apache-tomcat /webapps/docs/jspapi/index.html install -m 0644 opt/apache-tomcat /webapps/docs/manager-howto.html %{buildroot}/opt/apache-tomcat /webapps/docs/manager-howto.html install -m 0644 opt/apache-tomcat /webapps/docs/html-manager-howto.html %{buildroot}/opt/apache-tomcat /webapps/docs/html-manager-howto.html install -m 0644 opt/apache-tomcat /webapps/docs/aio.html %{buildroot}/opt/apache-tomcat /webapps/docs/aio.html install -m 0644 opt/apache-tomcat /webapps/docs/config/cluster-sender.html %{buildroot}/opt/apache-tomcat /webapps/docs/config/cluster-sender.html install -m 0644 opt/apache-tomcat /webapps/docs/config/realm.html %{buildroot}/opt/apache-tomcat /webapps/docs/config/realm.html install -m 0644 opt/apache-tomcat /webapps/docs/config/cluster-membership.html %{buildroot}/opt/apache-tomcat /webapps/docs/config/cluster-membership.html install -m 0644 opt/apache-tomcat /webapps/docs/config/manager.html %{buildroot}/opt/apache-tomcat /webapps/docs/config/manager.html install -m 0644 opt/apache-tomcat /webapps/docs/config/cluster-listener.html %{buildroot}/opt/apache-tomcat /webapps/docs/config/cluster-listener.html install -m 0644 opt/apache-tomcat /webapps/docs/config/context.html %{buildroot}/opt/apache-tomcat /webapps/docs/config/context.html install -m 0644 opt/apache-tomcat /webapps/docs/config/cluster.html %{buildroot}/opt/apache-tomcat /webapps/docs/config/cluster.html install -m 0644 opt/apache-tomcat /webapps/docs/config/server.html %{buildroot}/opt/apache-tomcat /webapps/docs/config/server.html install -m 0644 opt/apache-tomcat /webapps/docs/config/index.html %{buildroot}/opt/apache-tomcat /webapps/docs/config/index.html install -m 0644 opt/apache-tomcat /webapps/docs/config/loader.html %{buildroot}/opt/apache-tomcat /webapps/docs/config/loader.html install -m 0644 opt/apache-tomcat /webapps/docs/config/cluster-manager.html %{buildroot}/opt/apache-tomcat /webapps/docs/config/cluster-manager.html install -m 0644 opt/apache-tomcat /webapps/docs/config/filter.html %{buildroot}/opt/apache-tomcat /webapps/docs/config/filter.html install -m 0644 opt/apache-tomcat /webapps/docs/config/cluster-channel.html %{buildroot}/opt/apache-tomcat /webapps/docs/config/cluster-channel.html install -m 0644 opt/apache-tomcat /webapps/docs/config/http.html %{buildroot}/opt/apache-tomcat /webapps/docs/config/http.html install -m 0644 opt/apache-tomcat /webapps/docs/config/cluster-interceptor.html %{buildroot}/opt/apache-tomcat /webapps/docs/config/cluster-interceptor.html install -m 0644 opt/apache-tomcat /webapps/docs/config/cluster-deployer.html %{buildroot}/opt/apache-tomcat /webapps/docs/config/cluster-deployer.html

13 install -m 0644 opt/apache-tomcat /webapps/docs/config/resources.html %{buildroot}/opt/apache-tomcat /webapps/docs/config/resources.html install -m 0644 opt/apache-tomcat /webapps/docs/config/engine.html %{buildroot}/opt/apache-tomcat /webapps/docs/config/engine.html install -m 0644 opt/apache-tomcat /webapps/docs/config/jar-scanner.html %{buildroot}/opt/apache-tomcat /webapps/docs/config/jar-scanner.html install -m 0644 opt/apache-tomcat /webapps/docs/config/ajp.html %{buildroot}/opt/apache-tomcat /webapps/docs/config/ajp.html install -m 0644 opt/apache-tomcat /webapps/docs/config/systemprops.html %{buildroot}/opt/apache-tomcat /webapps/docs/config/systemprops.html install -m 0644 opt/apache-tomcat /webapps/docs/config/service.html %{buildroot}/opt/apache-tomcat /webapps/docs/config/service.html install -m 0644 opt/apache-tomcat /webapps/docs/config/globalresources.html %{buildroot}/opt/apache-tomcat /webapps/docs/config/globalresources.html install -m 0644 opt/apache-tomcat /webapps/docs/config/host.html %{buildroot}/opt/apache-tomcat /webapps/docs/config/host.html install -m 0644 opt/apache-tomcat /webapps/docs/config/valve.html %{buildroot}/opt/apache-tomcat /webapps/docs/config/valve.html install -m 0644 opt/apache-tomcat /webapps/docs/config/listeners.html %{buildroot}/opt/apache-tomcat /webapps/docs/config/listeners.html install -m 0644 opt/apache-tomcat /webapps/docs/config/executor.html %{buildroot}/opt/apache-tomcat /webapps/docs/config/executor.html install -m 0644 opt/apache-tomcat /webapps/docs/config/cluster-valve.html %{buildroot}/opt/apache-tomcat /webapps/docs/config/cluster-valve.html install -m 0644 opt/apache-tomcat /webapps/docs/config/cluster-receiver.html %{buildroot}/opt/apache-tomcat /webapps/docs/config/cluster-receiver.html install -m 0644 opt/apache-tomcat /webapps/docs/security-howto.html %{buildroot}/opt/apache-tomcat /webapps/docs/security-howto.html install -m 0644 opt/apache-tomcat /webapps/docs/tribes/membership.html %{buildroot}/opt/apache-tomcat /webapps/docs/tribes/membership.html install -m 0644 opt/apache-tomcat /webapps/docs/tribes/faq.html %{buildroot}/opt/apache-tomcat /webapps/docs/tribes/faq.html install -m 0644 opt/apache-tomcat /webapps/docs/tribes/transport.html %{buildroot}/opt/apache-tomcat /webapps/docs/tribes/transport.html install -m 0644 opt/apache-tomcat /webapps/docs/tribes/status.html %{buildroot}/opt/apache-tomcat /webapps/docs/tribes/status.html install -m 0644 opt/apache-tomcat /webapps/docs/tribes/introduction.html %{buildroot}/opt/apache-tomcat /webapps/docs/tribes/introduction.html install -m 0644 opt/apache-tomcat /webapps/docs/tribes/developers.html %{buildroot}/opt/apache-tomcat /webapps/docs/tribes/developers.html install -m 0644 opt/apache-tomcat /webapps/docs/tribes/interceptors.html %{buildroot}/opt/apache-tomcat /webapps/docs/tribes/interceptors.html install -m 0644 opt/apache-tomcat /webapps/docs/tribes/setup.html %{buildroot}/opt/apache-tomcat /webapps/docs/tribes/setup.html install -m 0644 opt/apache-tomcat /webapps/docs/class-loader-howto.html %{buildroot}/opt/apache-tomcat /webapps/docs/class-loader-howto.html install -m 0644 opt/apache-tomcat /webapps/docs/ssl-howto.html %{buildroot}/opt/apache-tomcat /webapps/docs/ssl-howto.html install -m 0644 opt/apache-tomcat /webapps/docs/maven-jars.html %{buildroot}/opt/apache-tomcat /webapps/docs/maven-jars.html install -m 0644 opt/apache-tomcat /webapps/docs/appdev/index.html %{buildroot}/opt/apache-tomcat /webapps/docs/appdev/index.html install -m 0644 opt/apache-tomcat /webapps/docs/appdev/introduction.html %{buildroot}/opt/apache-tomcat /webapps/docs/appdev/introduction.html install -m 0644 opt/apache-tomcat /webapps/docs/appdev/source.html %{buildroot}/opt/apache-tomcat /webapps/docs/appdev/source.html install -m 0644 opt/apache-tomcat /webapps/docs/appdev/web.xml.txt %{buildroot}/opt/apache-tomcat /webapps/docs/appdev/web.xml.txt install -m 0644 opt/apache-tomcat /webapps/docs/appdev/sample/index.html %{buildroot}/opt/apache-tomcat /webapps/docs/appdev/sample/index.html install -m 0644 opt/apache-tomcat /webapps/docs/appdev/sample/web/web- INF/web.xml %{buildroot}/opt/apache-tomcat /webapps/docs/appdev/sample/web/web- INF/web.xml

14 install -m 0644 opt/apache-tomcat /webapps/docs/appdev/sample/web/index.html %{buildroot}/opt/apache-tomcat /webapps/docs/appdev/sample/web/index.html install -m 0644 opt/apache-tomcat /webapps/docs/appdev/sample/web/hello.jsp %{buildroot}/opt/apache-tomcat /webapps/docs/appdev/sample/web/hello.jsp install -m 0644 opt/apache-tomcat /webapps/docs/appdev/sample/web/images/tomcat.gif %{buildroot}/opt/apachetomcat /webapps/docs/appdev/sample/web/images/tomcat.gif install -m 0644 opt/apache-tomcat /webapps/docs/appdev/sample/build.xml %{buildroot}/opt/apache-tomcat /webapps/docs/appdev/sample/build.xml install -m 0644 opt/apache-tomcat /webapps/docs/appdev/sample/src/mypackage/Hello.java %{buildroot}/opt/apachetomcat /webapps/docs/appdev/sample/src/mypackage/hello.java install -m 0644 opt/apache-tomcat /webapps/docs/appdev/sample/sample.war %{buildroot}/opt/apache-tomcat /webapps/docs/appdev/sample/sample.war install -m 0644 opt/apache-tomcat /webapps/docs/appdev/sample/docs/readme.txt %{buildroot}/opt/apache-tomcat /webapps/docs/appdev/sample/docs/readme.txt install -m 0644 opt/apache-tomcat /webapps/docs/appdev/build.xml.txt %{buildroot}/opt/apache-tomcat /webapps/docs/appdev/build.xml.txt install -m 0644 opt/apache-tomcat /webapps/docs/appdev/deployment.html %{buildroot}/opt/apache-tomcat /webapps/docs/appdev/deployment.html install -m 0644 opt/apache-tomcat /webapps/docs/appdev/processes.html %{buildroot}/opt/apache-tomcat /webapps/docs/appdev/processes.html install -m 0644 opt/apache-tomcat /webapps/docs/appdev/installation.html %{buildroot}/opt/apache-tomcat /webapps/docs/appdev/installation.html install -m 0644 opt/apache-tomcat /webapps/docs/building.txt %{buildroot}/opt/apache-tomcat /webapps/docs/building.txt install -m 0644 opt/apache-tomcat /webapps/docs/deployer-howto.html %{buildroot}/opt/apache-tomcat /webapps/docs/deployer-howto.html install -m 0644 opt/apache-tomcat /webapps/docs/introduction.html %{buildroot}/opt/apache-tomcat /webapps/docs/introduction.html install -m 0644 opt/apache-tomcat /webapps/docs/servletapi/index.html %{buildroot}/opt/apache-tomcat /webapps/docs/servletapi/index.html install -m 0644 opt/apache-tomcat /webapps/docs/release-notes.txt %{buildroot}/opt/apache-tomcat /webapps/docs/release-notes.txt install -m 0644 opt/apache-tomcat /webapps/docs/jndi-resources-howto.html %{buildroot}/opt/apache-tomcat /webapps/docs/jndi-resources-howto.html install -m 0644 opt/apache-tomcat /webapps/docs/cluster-howto.html %{buildroot}/opt/apache-tomcat /webapps/docs/cluster-howto.html install -m 0644 opt/apache-tomcat /webapps/docs/funcspecs/fs-jdbc-realm.html %{buildroot}/opt/apache-tomcat /webapps/docs/funcspecs/fs-jdbc-realm.html install -m 0644 opt/apache-tomcat /webapps/docs/funcspecs/mbean-names.html %{buildroot}/opt/apache-tomcat /webapps/docs/funcspecs/mbean-names.html install -m 0644 opt/apache-tomcat /webapps/docs/funcspecs/index.html %{buildroot}/opt/apache-tomcat /webapps/docs/funcspecs/index.html install -m 0644 opt/apache-tomcat /webapps/docs/funcspecs/fs-memory-realm.html %{buildroot}/opt/apache-tomcat /webapps/docs/funcspecs/fs-memory-realm.html install -m 0644 opt/apache-tomcat /webapps/docs/funcspecs/fs-admin-opers.html %{buildroot}/opt/apache-tomcat /webapps/docs/funcspecs/fs-admin-opers.html install -m 0644 opt/apache-tomcat /webapps/docs/funcspecs/fs-admin-apps.html %{buildroot}/opt/apache-tomcat /webapps/docs/funcspecs/fs-admin-apps.html install -m 0644 opt/apache-tomcat /webapps/docs/funcspecs/fs-jndi-realm.html %{buildroot}/opt/apache-tomcat /webapps/docs/funcspecs/fs-jndi-realm.html install -m 0644 opt/apache-tomcat /webapps/docs/funcspecs/fs-default.html %{buildroot}/opt/apache-tomcat /webapps/docs/funcspecs/fs-default.html install -m 0644 opt/apache-tomcat /webapps/docs/funcspecs/fs-admin-objects.html %{buildroot}/opt/apache-tomcat /webapps/docs/funcspecs/fs-admin-objects.html install -m 0644 opt/apache-tomcat /webapps/docs/mbeans-descriptor-howto.html %{buildroot}/opt/apache-tomcat /webapps/docs/mbeans-descriptor-howto.html install -m 0644 opt/apache-tomcat /webapps/docs/logging.html %{buildroot}/opt/apache-tomcat /webapps/docs/logging.html install -m 0644 opt/apache-tomcat /webapps/docs/jasper-howto.html %{buildroot}/opt/apache-tomcat /webapps/docs/jasper-howto.html

15 install -m 0644 opt/apache-tomcat /webapps/docs/building.html %{buildroot}/opt/apache-tomcat /webapps/docs/building.html install -m 0644 opt/apache-tomcat /webapps/docs/jndi-datasource-exampleshowto.html %{buildroot}/opt/apache-tomcat /webapps/docs/jndi-datasourceexamples-howto.html install -m 0644 opt/apache-tomcat /webapps/docs/windows-auth-howto.html %{buildroot}/opt/apache-tomcat /webapps/docs/windows-auth-howto.html install -m 0644 opt/apache-tomcat /webapps/docs/extras.html %{buildroot}/opt/apache-tomcat /webapps/docs/extras.html install -m 0644 opt/apache-tomcat /webapps/docs/developers.html %{buildroot}/opt/apache-tomcat /webapps/docs/developers.html install -m 0644 opt/apache-tomcat /webapps/docs/images/tomcat.gif %{buildroot}/opt/apache-tomcat /webapps/docs/images/tomcat.gif install -m 0644 opt/apache-tomcat /webapps/docs/images/update.gif %{buildroot}/opt/apache-tomcat /webapps/docs/images/update.gif install -m 0644 opt/apache-tomcat /webapps/docs/images/fix.gif %{buildroot}/opt/apache-tomcat /webapps/docs/images/fix.gif install -m 0644 opt/apache-tomcat /webapps/docs/images/asf-logo.gif %{buildroot}/opt/apache-tomcat /webapps/docs/images/asf-logo.gif install -m 0644 opt/apache-tomcat /webapps/docs/images/docs.gif %{buildroot}/opt/apache-tomcat /webapps/docs/images/docs.gif install -m 0644 opt/apache-tomcat /webapps/docs/images/cors-flowchart.png %{buildroot}/opt/apache-tomcat /webapps/docs/images/cors-flowchart.png install -m 0644 opt/apache-tomcat /webapps/docs/images/add.gif %{buildroot}/opt/apache-tomcat /webapps/docs/images/add.gif install -m 0644 opt/apache-tomcat /webapps/docs/images/void.gif %{buildroot}/opt/apache-tomcat /webapps/docs/images/void.gif install -m 0644 opt/apache-tomcat /webapps/docs/images/design.gif %{buildroot}/opt/apache-tomcat /webapps/docs/images/design.gif install -m 0644 opt/apache-tomcat /webapps/docs/images/code.gif %{buildroot}/opt/apache-tomcat /webapps/docs/images/code.gif install -m 0644 opt/apache-tomcat /webapps/docs/images/printer.gif %{buildroot}/opt/apache-tomcat /webapps/docs/images/printer.gif install -m 0644 opt/apache-tomcat /webapps/docs/images/tomcat.svg %{buildroot}/opt/apache-tomcat /webapps/docs/images/tomcat.svg install -m 0644 opt/apache-tomcat /webapps/docs/proxy-howto.html %{buildroot}/opt/apache-tomcat /webapps/docs/proxy-howto.html install -m 0644 opt/apache-tomcat /webapps/docs/running.txt %{buildroot}/opt/apache-tomcat /webapps/docs/running.txt install -m 0644 opt/apache-tomcat /webapps/docs/elapi/index.html %{buildroot}/opt/apache-tomcat /webapps/docs/elapi/index.html install -m 0644 opt/apache-tomcat /webapps/docs/balancer-howto.html %{buildroot}/opt/apache-tomcat /webapps/docs/balancer-howto.html install -m 0644 opt/apache-tomcat /webapps/docs/setup.html %{buildroot}/opt/apache-tomcat /webapps/docs/setup.html install -m 0644 opt/apache-tomcat /webapps/docs/monitoring.html %{buildroot}/opt/apache-tomcat /webapps/docs/monitoring.html install -m 0644 opt/apache-tomcat /webapps/docs/jdbc-pool.html %{buildroot}/opt/apache-tomcat /webapps/docs/jdbc-pool.html install -m 0644 opt/apache-tomcat /webapps/docs/comments.html %{buildroot}/opt/apache-tomcat /webapps/docs/comments.html ## Pre install scripts %pre ( ## Variables for this section: DATE=$( /bin/date +%Y%b%d-%H:%M ) ## Make the destination directory if it doesn't exist: [! -d /opt/apache-tomcat ] && mkdir -p /opt/apache-tomcat

16 ## Remove sym link, if it exists: [ -L /opt/apache-tomcat ] && unlink /opt/apache-tomcat ## If the tomcat user and group doesn't exist, add them. ## I chose gid and uid of 333 because I want it less than 500 for user accounts. This is a service acct. [ `grep -c tomcat /etc/group` -lt "1" ] && groupadd -f -g 333 tomcat [ `grep -c tomcat /etc/passwd` -lt "1" ] && useradd -c "Tomcat Srvc Acct." -m -g 333 -s /bin/bash -u 333 tomcat ## the sys admin doesn't need to know this AND it needs to be unique per system: MAC=$( ip addr show eth0 grep ether awk '{print $2}' ) PASSWD_TOMCAT=$( echo "$MAC $HOSTNAME" `cat /var/log/messages` /usr/bin/sha512sum cut -c8-36 ) echo "tomcat:${passwd_tomcat}" chpasswd ) > /var/tmp/%{name}-%{version}-%{release}-install.pre.log 2>&1 ## Post install scripts %post ( ## Variables for this section: DATE=$( /bin/date +%Y%b%d-%H:%M ) ## Create sym link to new package: /bin/ln -s /opt/apache-tomcat /opt/apache-tomcat ## Set the service to run on boot: /sbin/chkconfig --add apache-tomcat ## Start the service /sbin/service apache-tomcat start ) > /var/tmp/%{name}-%{version}-%{release}-install.post.log 2>&1 ## Pre uninstall scripts %preun ( ## Variables for this section: DATE=$( /bin/date +%Y%b%d-%H:%M ) ## Stop the service: /sbin/service apache-tomcat stop ## Delete the service: /sbin/chkconfig --del apache-tomcat ## backup functional files: [ -d /opt/apache-tomcat ] && /bin/tar czf /opt/apache-tomcat ${DATE}.tgz /opt/apache-tomcat /conf /opt/apache-tomcat /webapps /etc/init.d/apache-tomcat ## remove the sym link /bin/unlink /opt/apache-tomcat ) > /var/tmp/%{name}-%{version}-%{release}-uninstall.pre.log 2>&1 ## Pre uninstall scripts

17 %postun ( echo " " ) > /var/tmp/%{name}-%{version}-%{release}-uninstall.post.log 2>&1 ## Files section, what do we install and how we keep track of it. %files %defattr(664, root, root, 755) %dir /opt %defattr(664, tomcat, tomcat, 755) %dir /opt/apache-tomcat %dir /opt/apache-tomcat /bin %dir /opt/apache-tomcat /temp %dir /opt/apache-tomcat /work %dir /opt/apache-tomcat /logs %dir /opt/apache-tomcat /conf %dir /opt/apache-tomcat /lib %dir /opt/apache-tomcat /webapps %dir /opt/apache-tomcat /webapps/examples %dir /opt/apache-tomcat /webapps/root %dir /opt/apache-tomcat /webapps/root/web-inf %dir /opt/apache-tomcat /webapps/manager %dir /opt/apache-tomcat /webapps/manager/web-inf %dir /opt/apache-tomcat /webapps/manager/web-inf/jsp %dir /opt/apache-tomcat /webapps/manager/meta-inf %dir /opt/apache-tomcat /webapps/manager/images %dir /opt/apache-tomcat /webapps/docs %dir /opt/apache-tomcat /webapps/docs/api %dir /opt/apache-tomcat /webapps/docs/web-inf %dir /opt/apache-tomcat /webapps/docs/architecture %dir /opt/apache-tomcat /webapps/docs/architecture/startup %dir /opt/apache-tomcat /webapps/docs/architecture/requestprocess %dir /opt/apache-tomcat /webapps/docs/jspapi %dir /opt/apache-tomcat /webapps/docs/config %dir /opt/apache-tomcat /webapps/docs/tribes %dir /opt/apache-tomcat /webapps/docs/appdev %dir /opt/apache-tomcat /webapps/docs/appdev/sample %dir /opt/apache-tomcat /webapps/docs/appdev/sample/web %dir /opt/apache-tomcat /webapps/docs/appdev/sample/web/web-inf %dir /opt/apache-tomcat /webapps/docs/appdev/sample/web/images %dir /opt/apache-tomcat /webapps/docs/appdev/sample/src %dir /opt/apache-tomcat /webapps/docs/appdev/sample/src/mypackage %dir /opt/apache-tomcat /webapps/docs/appdev/sample/docs %dir /opt/apache-tomcat /webapps/docs/servletapi %dir /opt/apache-tomcat /webapps/docs/funcspecs %dir /opt/apache-tomcat /webapps/docs/images %dir /opt/apache-tomcat /webapps/docs/elapi # %attr(750, root, root) /etc/init.d/apache-tomcat /RELEASE-NOTES /bin/setclasspath.bat %attr(755, tomcat, tomcat) /opt/apache-tomcat /bin/version.sh %attr(755, tomcat, tomcat) /opt/apache-tomcat /bin/startup.sh %attr(755, tomcat, tomcat) /opt/apache-tomcat /bin/configtest.sh /bin/digest.bat /bin/version.bat %attr(755, tomcat, tomcat) /opt/apache-tomcat /bin/setclasspath.sh /bin/shutdown.bat /bin/startup.bat %attr(755, tomcat, tomcat) /opt/apache-tomcat /bin/tool-wrapper.sh /bin/catalina-tasks.xml

18 7.0.47/bin/tool-wrapper.bat %attr(755, tomcat, tomcat) /opt/apache-tomcat /bin/catalina.sh /bin/bootstrap.jar %attr(755, tomcat, tomcat) /opt/apache-tomcat /bin/digest.sh /bin/cpappend.bat /bin/configtest.bat /bin/commons-daemon-native.tar.gz /bin/tomcat-juli.jar /bin/tomcat-native.tar.gz /bin/catalina.bat /bin/commons-daemon.jar %attr(755, tomcat, tomcat) /opt/apache-tomcat /bin/shutdown.sh %attr(755, tomcat, tomcat) /opt/apache-tomcat /bin/daemon.sh /temp/safeToDelete.tmp /NOTICE %attr(600, tomcat, tomcat) /opt/apache-tomcat /conf/logging.properties %attr(600, tomcat, tomcat) /opt/apache-tomcat /conf/web.xml %attr(600, tomcat, tomcat) /opt/apache-tomcat /conf/server.xml %attr(600, tomcat, tomcat) /opt/apache-tomcat /conf/catalina.policy %attr(600, tomcat, tomcat) /opt/apache-tomcat /conf/context.xml %attr(600, tomcat, tomcat) /opt/apache-tomcat /conf/catalina.properties %attr(600, tomcat, tomcat) /opt/apache-tomcat /conf/tomcat-users.xml /lib/tomcat-util.jar /lib/tomcat-i18n-fr.jar /lib/ecj jar /lib/servlet-api.jar /lib/websocket-api.jar /lib/tomcat-i18n-es.jar /lib/annotations-api.jar /lib/jsp-api.jar /lib/tomcat7-websocket.jar /lib/catalina-ha.jar /lib/catalina.jar /lib/tomcat-api.jar /lib/jasper-el.jar /lib/catalina-ant.jar /lib/tomcat-i18n-ja.jar /lib/tomcat-jdbc.jar /lib/el-api.jar /lib/jasper.jar /lib/tomcat-dbcp.jar /lib/tomcat-coyote.jar /lib/catalina-tribes.jar /LICENSE /RUNNING.txt /webapps/examples/index.html /webapps/ROOT/bg-button.png /webapps/ROOT/tomcat.gif /webapps/ROOT/WEB-INF/web.xml /webapps/ROOT/asf-logo-wide.gif /webapps/ROOT/tomcat.css /webapps/ROOT/index.jsp /webapps/ROOT/RELEASE-NOTES.txt /webapps/ROOT/bg-nav.png /webapps/ROOT/build.xml /webapps/ROOT/bg-middle.png /webapps/ROOT/tomcat-power.gif /webapps/ROOT/asf-logo.png /webapps/ROOT/favicon.ico /webapps/ROOT/tomcat.svg /webapps/ROOT/bg-upper.png /webapps/ROOT/bg-nav-item.png /webapps/ROOT/tomcat.png

19 7.0.47/webapps/manager/WEB- INF/jsp/sessionDetail.jsp /webapps/manager/WEB- INF/jsp/404.jsp /webapps/manager/WEB- INF/jsp/sessionsList.jsp /webapps/manager/WEB- INF/jsp/403.jsp /webapps/manager/WEB- INF/jsp/401.jsp /webapps/manager/WEB-INF/web.xml /webapps/manager/xform.xsl /webapps/manager/index.jsp /webapps/manager/META- INF/context.xml /webapps/manager/status.xsd /webapps/manager/images/tomcat.gif /webapps/manager/images/update.gif /webapps/manager/images/fix.gif /webapps/manager/images/asflogo.gif /webapps/manager/images/docs.gif /webapps/manager/images/add.gif /webapps/manager/images/void.gif /webapps/manager/images/design.gif /webapps/manager/images/code.gif /webapps/docs/windows-servicehowto.html /webapps/docs/connectors.html /webapps/docs/realm-howto.html /webapps/docs/cgi-howto.html /webapps/docs/virtual-hostinghowto.html /webapps/docs/api/index.html /webapps/docs/web-sockethowto.html /webapps/docs/WEB-INF/web.xml /webapps/docs/security-managerhowto.html /webapps/docs/ssi-howto.html /webapps/docs/apr.html /webapps/docs/default-servlet.html /webapps/docs/architecture/startup.html /webapps/docs/architecture/requestProcess.html /webapps/docs/architecture/index.html /webapps/docs/architecture/overview.html /webapps/docs/architecture/startup/serverStartup.pdf /webapps/docs/architecture/startup/serverStartup.txt /webapps/docs/architecture/requestProcess/requestProcess.pdf /webapps/docs/architecture/requestProcess/roseModel.mdl /webapps/docs/index.html /webapps/docs/changelog.html /webapps/docs/jspapi/index.html /webapps/docs/manager-howto.html

20 7.0.47/webapps/docs/html-managerhowto.html /webapps/docs/aio.html /webapps/docs/config/clustersender.html /webapps/docs/config/realm.html /webapps/docs/config/clustermembership.html /webapps/docs/config/manager.html /webapps/docs/config/clusterlistener.html /webapps/docs/config/context.html /webapps/docs/config/cluster.html /webapps/docs/config/server.html /webapps/docs/config/index.html /webapps/docs/config/loader.html /webapps/docs/config/clustermanager.html /webapps/docs/config/filter.html /webapps/docs/config/clusterchannel.html /webapps/docs/config/http.html /webapps/docs/config/clusterinterceptor.html /webapps/docs/config/clusterdeployer.html /webapps/docs/config/resources.html /webapps/docs/config/engine.html /webapps/docs/config/jarscanner.html /webapps/docs/config/ajp.html /webapps/docs/config/systemprops.html /webapps/docs/config/service.html /webapps/docs/config/globalresources.html /webapps/docs/config/host.html /webapps/docs/config/valve.html /webapps/docs/config/listeners.html /webapps/docs/config/executor.html /webapps/docs/config/clustervalve.html /webapps/docs/config/clusterreceiver.html /webapps/docs/security-howto.html /webapps/docs/tribes/membership.html /webapps/docs/tribes/faq.html /webapps/docs/tribes/transport.html /webapps/docs/tribes/status.html /webapps/docs/tribes/introduction.html /webapps/docs/tribes/developers.html /webapps/docs/tribes/interceptors.html /webapps/docs/tribes/setup.html /webapps/docs/class-loaderhowto.html /webapps/docs/ssl-howto.html